APK Security & Privacy Score
Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.
Security
Scan-weighted
91/100
Threat scan clean
Modern target SDK
Privacy
Permissions & network
74/100
High-risk permissions
Possible tracking
82/100
Good
Overall trust
Facts
Threat scan
0/75 flagged, 0 suspicious
Permissions
26 requested
Network strings
46 URLs (0 HTTP, 46 HTTPS)
Target SDK
35
Certificate
Valid until 2034-09-16 (8 years, suspicious)
Warnings
High-risk permissions detected: android.permission.REQUEST_INSTALL_PACKAGES, android.permission.SYSTEM_ALERT_WINDOW, android.permission.REQUEST_DELETE_PACKAGES, android.permission.PACKAGE_USAGE_STATS, android.permission.QUERY_ALL_PACKAGES
Requests 26 permissions (review carefully).
Possible analytics/tracking domains found: app-measurement.com, firebase-settings.crashlytics.com, pagead2.googlesyndication.com
Package Name
com.aptoide.android.aptoidegames
Version Code
621
Version Name
1.19.6
Application Name
com.aptoide.android.aptoidegames.AptoideApplication
Debuggable
No
Allow Backup
No
Min SDK
Android 26 (Oreo)
Target SDK
Android 35 (Android 15)
Supported ABIs
arm64-v8a
armeabi-v7a
x86
x86_64
Certificate & Signer
Valid From
Valid To
Serial Number
Thumbprint
Issuer: DN
Issuer: ST
Subject: DN
Subject: ST
Security Scan
0
✓ Clean
Malicious
0
Suspicious
0
Harmless
0
Undetected
67
Timeout
0
Failure
1
Scan Providers
ALYac
APEX
AVG
Acronis
AhnLab-V3
Alibaba
Antiy-AVL
Arcabit
Avast
Avast-Mobile
Avira
BitDefender
BitDefenderFalx
Bkav
CAT-QuickHeal
CMC
CTX
ClamAV
CrowdStrike
Cylance
Cynet
DeepInstinct
DrWeb
ESET-NOD32
Elastic
Emsisoft
F-Secure
Fortinet
GData
Google
Gridinsoft
Ikarus
Jiangmin
K7AntiVirus
K7GW
Kaspersky
Kingsoft
Lionic
Malwarebytes
MaxSecure
McAfeeD
MicroWorld-eScan
Microsoft
NANO-Antivirus
Paloalto
Panda
Rising
SUPERAntiSpyware
Sangfor
SentinelOne
Skyhigh
Sophos
Symantec
SymantecMobileInsight
TACHYON
Tencent
Trapmine
TrellixENS
TrendMicro
TrendMicro-HouseCall
Trustlook
VBA32
VIPRE
Varist
ViRobot
VirIT
Webroot
Xcitium
Yandex
Zillya
ZoneAlarm
Zoner
alibabacloud
huorong
tehtris
File Signatures
SHA-256
d92a2e7d4e3f667027cf95f5046db45735021ccdbd45c8beb90cb8dd9941b2ee
MD5
612ad496df0d2b39be6eeaba3a4dbbf1
SHA-1
c2c5b00f7fdff0f2067abf72cd2f306270ca77df
SSDEEP
196608:eDOQ20jg1wFeWwsR5akYbS7ZHEofKgF6S:enjzFRekUK+CKK
TLSH
T177860146FFD8DA1EC8768137188B627420195C298F42968B67CCB77C34B76E84EC5BC9
VHASH
8248094c1f8eda22141a61957314db15
PERMHASH
a5032f55227295e4155ae3ba5b4ab9a44eca95cc846e66bb93e5a00a30989374
File Intelligence
Type Description
Human-friendly file type name based on multiple detection methods.
Type Extension
Most likely file extension inferred from the content.
Type Tag
Primary type tag assigned by the classifier.
Type Tags
Additional type tags that describe the file content.
Magic
File signature result from magic bytes inspection.
Magika
File type predicted by Magika (ML-based file type detection).
TrID
TrID file type guesses with probabilities.
dhash
Perceptual hash used to compare visual similarity of files.
raw md5
Raw MD5 hash of the file contents.
extensions
File extensions found inside the APK and how many of each.
file types
Detected embedded file types and their counts.
highest datetime
Latest timestamp found among files inside the archive.
lowest datetime
Earliest timestamp found among files inside the archive.
num children
Number of files contained within the archive.
type
Container type detected for the analyzed file.
uncompressed size
Estimated total size of all files after extraction.
Sandbox
Sandbox Verdicts
Zenbox android
Harmless
97% confidence
CLEAN
Deep Manifest Analysis
Activity Intents (1)
com.aptoide.android.aptoidegames.MainActivity
Service Intents (2)
com.aptoide.android.aptoidegames.notifications.AptoideGamesNotificationsService
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
Receiver Intents (4)
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
Native Libraries (2)
libandroidx.graphics.path
libandroidx.graphics.path.so
libdatastore_shared_counter
libdatastore_shared_counter.so
Requested Permissions (28)
android.permission.POST_NOTIFICATIONS
android.permission.POST_NOTIFICATIONS
have full network access
android.permission.INTERNET
android.permission.REQUEST_DELETE_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
This app can appear on top of other apps
android.permission.SYSTEM_ALERT_WINDOW
Foreground service
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION
android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION
Package Usage Stats
android.permission.PACKAGE_USAGE_STATS
This app can appear on top of other apps
android.permission.SYSTEM_ALERT_WINDOW
Foreground service
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ENFORCE_UPDATE_OWNERSHIP
android.permission.ENFORCE_UPDATE_OWNERSHIP
android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION
android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION
read the contents of your shared storage
android.permission.READ_EXTERNAL_STORAGE
modify or delete the contents of your shared storage
android.permission.WRITE_EXTERNAL_STORAGE
view network connections
android.permission.ACCESS_NETWORK_STATE
android.permission.QUERY_ALL_PACKAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.USE_BIOMETRIC
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
android.permission.USE_FINGERPRINT
keep car screen turned on
android.permission.WAKE_LOCK
Install Referrer service
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID
com.google.android.gms.permission.AD_ID
AdServices Attribution
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
AdServices Advertising ID
android.permission.ACCESS_ADSERVICES_AD_ID
Cloud messaging receive
com.google.android.c2dm.permission.RECEIVE
run at startup
android.permission.RECEIVE_BOOT_COMPLETED
Dynamic receiver access
com.aptoide.android.aptoidegames.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
read phone status and identity
android.permission.READ_PHONE_STATE
Activities (11)
com.aptoide.android.aptoidegames.MainActivity
com.aptoide.android.aptoidegames.UrlActivity
com.aptoide.android.aptoidegames.SupportActivity
com.aptoide.android.aptoidegames.feature_rtb.presentation.AdRedirectWebViewActivity
com.aptoide.android.aptoidegames.play_and_earn.presentation.permissions.OverlayPermissionActivity
com.aptoide.android.aptoidegames.play_and_earn.presentation.permissions.UsageStatsPermissionActivity
androidx.credentials.playservices.controllers.identityauth.HiddenActivity
androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
androidx.compose.ui.tooling.PreviewActivity
Services (16)
com.aptoide.android.aptoidegames.notifications.AptoideGamesNotificationsService
com.aptoide.android.aptoidegames.gamegenie.presentation.GameGenieOverlayService
com.aptoide.android.aptoidegames.play_and_earn.presentation.service.PaEForegroundService
cm.aptoide.pt.installer.obb.ObbService
androidx.credentials.playservices.CredentialProviderMetadataHolder
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.components.ComponentDiscoveryService
com.google.android.gms.auth.api.signin.RevocationBoundService
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.google.firebase.sessions.SessionLifecycleService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
Broadcast Receivers (7)
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
Content Providers (3)
androidx.startup.InitializationProvider
androidx.core.content.FileProvider
com.google.firebase.provider.FirebaseInitProvider
URL Endpoints (55)
http://xml.org/sax/features/external-general-entities
http://xml.org/sax/features/external-parameter-entities
http://xml.org/sax/properties/lexical-handler
http://xmlpull.org/v1/doc/features.html#process-docdecl
http://xmlpull.org/v1/doc/features.html#process-namespaces
https://accounts.google.com/o/oauth2/revoke?token=
https://api.indicative.com/service/alias
https://api.indicative.com/service/event
https://apichain.catappult.io/
https://app-measurement.com/a
https://app-measurement.com/s/d
https://aptoide-mmp.aptoide.com/api/v1/
https://aptoide-rtb.aptoide.com
https://aptoide.com/legal
https://aptoide.com/legal?section=privacy
https://buzz.aptoide.com:10002
https://cdn6.aptoide.com/imgs/c/e/f/ceffc555296046d89ca0c3e69b4c9439_fgraphic.jpg
https://cdn6.aptoide.com/imgs/d/7/a/d7a1e9676547714cbaa366997183e136_icon.png
https://cdn6.aptoide.com/includes/themes/2014/images/vanilla_appcoins_info_video_placeholder.svg
https://developer.android.com/training/articles/direct-boot
Submission Details
Submitted At
First Submission
Last Submission
Stored Until